Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MPHNqx3HfJMj0eCK6sDL2cRhO24.roa
File: MPHNqx3HfJMj0eCK6sDL2cRhO24.roa (raw, json)
Hash identifier: q5C2xphEnKrAzqKaBfkvfZ6Po1hLeV+9/fLgpIoxUg8=
Subject key identifier: 30:F1:CD:AB:1D:C7:7C:93:23:D1:E0:8A:EA:C0:CB:D9:C4:61:3B:6E
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 019D06A156E1D3BBF500FCA6C607CDCBB09E
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MPHNqx3HfJMj0eCK6sDL2cRhO24.roa
Signing time: Thu 19 Mar 2026 15:05:30 +0000
ROA not before: Thu 19 Mar 2026 15:05:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202653
IP address blocks: 193.59.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:a1:56:e1:d3:bb:f5:00:fc:a6:c6:07:cd:cb:b0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Mar 19 15:05:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30f1cdab1dc77c9323d1e08aeac0cbd9c4613b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:99:ea:55:e6:12:ea:cf:bb:2b:a7:73:c5:
60:ff:b9:2f:bd:7c:c7:58:5c:97:e8:48:33:db:13:
4b:76:70:7f:c1:41:ee:af:96:13:73:cf:33:da:5c:
a6:13:d2:8b:68:09:3e:ef:10:5d:d6:c5:a7:bc:cc:
2f:6a:87:d0:b9:44:82:ce:03:dd:6a:00:e4:35:53:
9b:02:f9:47:25:5b:af:da:e0:e1:2f:5a:0e:c1:20:
9e:69:37:86:76:2c:87:3d:ce:2c:68:be:a8:7e:56:
cf:1e:d7:48:cd:48:94:b1:1a:da:ec:06:d5:34:56:
ee:f9:ba:80:03:a7:41:26:79:89:8f:69:62:86:90:
07:30:f8:c7:ad:59:8b:94:18:4b:cf:ab:e3:5c:a3:
a9:0c:f1:44:e0:b9:f4:f6:72:79:b0:dc:7a:86:df:
cf:98:53:2e:75:66:e4:0d:f0:37:43:77:51:7d:01:
53:e6:11:8f:62:a0:6f:17:0a:9e:db:57:0d:31:01:
67:ee:8c:a9:aa:7e:f8:3b:c1:74:76:9b:21:78:ab:
b3:d3:da:9a:fe:c2:61:e6:ad:74:54:b3:d8:ce:ab:
d1:b1:b4:e0:14:4c:b9:3b:b2:97:23:7a:6b:97:30:
90:42:6a:e5:17:48:cc:be:56:c1:aa:f2:44:5a:81:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:CD:AB:1D:C7:7C:93:23:D1:E0:8A:EA:C0:CB:D9:C4:61:3B:6E
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MPHNqx3HfJMj0eCK6sDL2cRhO24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.193.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b6:0d:0d:20:a8:0b:e8:08:ad:dc:ba:e6:2a:e7:6d:e2:91:
14:a4:98:d5:71:88:e4:68:ba:6c:c3:a3:08:74:ba:06:d2:1f:
db:6f:15:f3:61:d7:e4:72:d6:bf:cb:5d:c6:6b:af:0c:90:c9:
87:08:ec:65:33:78:b9:2d:7f:df:a6:b2:f7:80:76:07:6e:ec:
a6:65:a1:08:5c:4c:23:57:8e:28:51:6b:07:4d:6a:9e:20:ef:
81:41:50:04:b9:90:f9:c8:a9:5b:b8:2f:eb:9f:3f:da:69:f7:
ce:f7:da:f0:8d:d7:28:02:53:78:e6:3d:3f:2d:28:20:1b:88:
53:da:8e:f4:a7:2c:b9:83:4f:9a:ed:58:e8:2c:6b:96:7c:04:
1e:a7:ba:6f:94:fe:76:da:df:85:8f:df:5b:1d:28:41:80:1b:
68:56:9d:44:4a:ed:8b:dc:d4:ac:51:55:a9:84:a0:2d:0c:04:
0f:1f:ed:0e:4d:90:eb:ea:57:5d:e6:66:1a:0e:21:8f:25:0d:
5d:c0:aa:2f:33:a5:db:81:33:3a:8b:3d:b0:bc:ed:c5:20:b4:
ba:8f:75:d1:b3:1e:f7:f8:e1:60:3e:e0:4f:dc:65:1a:ca:10:
f3:2b:b4:31:79:48:92:93:dc:52:76:62:79:cf:30:c2:6d:cd:
d1:3e:27:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0GoVbh07v1APymxgfNy7CeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw
MTE4OGYwHhcNMjYwMzE5MTUwNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMGYxY2RhYjFkYzc3YzkzMjNkMWUwOGFlYWMwY2JkOWM0NjEzYjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7KZ6lXmEurPuyunc8Vg/7kvvXzH
WFyX6Egz2xNLdnB/wUHur5YTc88z2lymE9KLaAk+7xBd1sWnvMwvaofQuUSCzgPd
agDkNVObAvlHJVuv2uDhL1oOwSCeaTeGdiyHPc4saL6oflbPHtdIzUiUsRra7AbV
NFbu+bqAA6dBJnmJj2lihpAHMPjHrVmLlBhLz6vjXKOpDPFE4Ln09nJ5sNx6ht/P
mFMudWbkDfA3Q3dRfQFT5hGPYqBvFwqe21cNMQFn7oypqn74O8F0dpsheKuz09qa
/sJh5q10VLPYzqvRsbTgFEy5O7KXI3prlzCQQmrlF0jMvlbBqvJEWoHGhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDDxzasdx3yTI9HgiurAy9nEYTtuMB8GA1UdIwQY
MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt
YzA2NzFiZjRjZjNlLzEvTVBITnF4M0hmSk1qMGVDSzZzREwyY1JoTzI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl
LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTvBMA0G
CSqGSIb3DQEBCwUAA4IBAQAXtg0NIKgL6Ait3LrmKudt4pEUpJjVcYjkaLpsw6MI
dLoG0h/bbxXzYdfkcta/y13Ga68MkMmHCOxlM3i5LX/fprL3gHYHbuymZaEIXEwj
V44oUWsHTWqeIO+BQVAEuZD5yKlbuC/rnz/aaffO99rwjdcoAlN45j0/LSggG4hT
2o70pyy5g0+a7VjoLGuWfAQep7pvlP522t+Fj99bHShBgBtoVp1ESu2L3NSsUVWp
hKAtDAQPH+0OTZDr6ldd5mYaDiGPJQ1dwKovM6XbgTM6iz2wvO3FILS6j3XRsx73
+OFgPuBP3GUayhDzK7QxeUiSk9xSdmJ5zzDCbc3RPieZ
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:13 2026 by rpki-client